Servers

Cloud Panel Server WP Ghost Setup Step by Step

Configure WP Ghost on a Cloud Panel server by setting the server type to Cloud Panel, generating the rewrite rules, then including the hidemywp.conf file in the Cloud Panel Vhost configuration above the {{settings}} line. Cloud Panel is a free hosting control panel that runs Nginx, MySQL, and PHP, popular for VPS deployments. Because Cloud Panel uses Nginx instead of Apache, WP Ghost can’t write to .htaccess like it does on Apache servers – the Nginx rules need to be loaded from a separate config file. This guide walks through the complete setup including the Cloud Panel-specific Vhost include step.

Before You Begin

You’ll need:

  • A Cloud Panel server with Nginx installed (the default Cloud Panel configuration).
  • A WordPress site running on Cloud Panel.
  • Administrator access to both your WordPress dashboard and the Cloud Panel admin interface.

Install WP Ghost

Install WP Ghost like any other WordPress plugin. You can install the free version from the WordPress directory or the Premium version from your WP Ghost account. For step-by-step installation instructions, see Install WP Ghost Free Plugin or Install WP Ghost Premium Plugin.

Set Server Type to Cloud Panel

WP Ghost auto-detects most server types, but on Cloud Panel you should set it manually to ensure the correct rewrite rule format.

  1. Log in to your WordPress dashboard.
  2. Go to WP Ghost > Advanced > Compatibility.
  3. Find the Server type dropdown.
  4. Select Cloud Panel.
  5. Click Save.

Configure Custom Paths

Now configure your path security:

  1. Go to WP Ghost > Change Paths.
  2. Select your security level (Lite Mode or Ghost Mode). See Safe Mode vs Ghost Mode for guidance.
  3. Customize the paths or use the predefined ones.
  4. Click Save.

WP Ghost generates the rewrite rules and writes them to hidemywp.conf in your WordPress root directory. You’ll see a notification asking you to add this file to your Cloud Panel Vhost configuration.

Add the Include Directive to the Vhost File

This is the Cloud Panel-specific step. You need to manually include the WP Ghost config file in your site’s Vhost configuration.

  1. Log in to your Cloud Panel admin interface.
  2. Go to your site and find the Vhost editor (usually under Settings > Vhost).
  3. Locate the {{settings}} line in the Vhost configuration.
  4. Add the include directive above the {{settings}} line:
include /home/clp/htdocs/yoursite.com/hidemywp.conf;
{{settings}}
  1. Replace the path with your actual WordPress installation path. The default Cloud Panel path is typically /home/clp/htdocs/yoursite.com/.
  2. Save the Vhost file.
  3. Restart Nginx from the Cloud Panel admin interface (usually under Services or by clicking the restart button after saving the Vhost).

Important: The include directive must be placed above the {{settings}} line, not below. The {{settings}} placeholder is where Cloud Panel injects its own server configuration. Including the WP Ghost rules above ensures they’re loaded before Cloud Panel’s defaults take over.

Verify the Setup

After restarting Nginx, test that everything works:

  1. Visit your site and confirm pages load normally.
  2. Try accessing your custom login URL – it should work.
  3. Try accessing the default /wp-login.php – it should return 404.
  4. In WP Ghost, click the Yes, it’s working button on the frontend test notification to confirm the setup.
  5. Run a Security Check to verify your full configuration.

Cloud Panel Limitations

Custom wp-admin path is not fully supported on Cloud Panel. If you set a custom wp-admin path with WP Ghost, you may still be redirected to the default /wp-admin on login. This is because Cloud Panel’s Vhost structure doesn’t allow Nginx to rewrite the wp-admin path consistently. The login path itself can be changed successfully – this limitation only affects the wp-admin directory rename.

Recommended workaround: Use Lite Mode (which keeps wp-admin at the default path) or focus on changing the login path, plugin paths, theme paths, and uploads paths instead. These all work correctly on Cloud Panel and provide significant attack surface reduction even without renaming wp-admin.

Every other WP Ghost feature works on Cloud Panel: firewall, brute force protection, 2FA, security headers, and most path changes.

Troubleshooting

Custom paths return 404 after saving WP Ghost

You probably haven’t added the include directive to the Vhost file yet, or you forgot to restart Nginx. Go to your Cloud Panel Vhost editor, verify the include /path/to/hidemywp.conf; line is present above {{settings}}, save, and restart Nginx.

Nginx fails to start after editing the Vhost

Cloud Panel validates the Vhost file before applying changes. If you see an error, the most common cause is a wrong file path in the include directive or a missing semicolon. Check the path matches your actual WordPress installation directory and ensure the line ends with a semicolon: include /home/clp/htdocs/yoursite.com/hidemywp.conf;

“hidemywp.conf not found” error

The file path in your Vhost include directive doesn’t match the actual file location. SSH into your server and run find / -name "hidemywp.conf" 2>/dev/null to locate the file. Update the include directive to use the correct path. Common locations: /home/clp/htdocs/yoursite.com/ or /var/www/yoursite.com/.

Login redirects to the default wp-admin

This is the known Cloud Panel limitation described above. Custom wp-admin paths can’t be fully rewritten on Cloud Panel. Use Lite Mode or leave wp-admin at the default. All other path security features still work.

Locked out of WordPress after configuration

Use the Safe URL parameter to bypass WP Ghost temporarily. If that doesn’t work, see the Emergency Disable guide to recover access via FTP.

Frequently Asked Questions

Do I need to restart Nginx every time I save WP Ghost?

Yes. Nginx loads its configuration at startup and keeps it in memory. Whenever WP Ghost updates the hidemywp.conf file (which happens any time you save Change Paths settings), you must restart Nginx for the new rules to take effect. Use the restart button in Cloud Panel or run the restart command via SSH.

Is Cloud Panel the same as CyberPanel?

No. Cloud Panel uses Nginx by default and is made by Hetzner. CyberPanel uses OpenLiteSpeed by default. They have different Vhost configurations and different ways of handling rewrite rules. If you’re on CyberPanel, see the OpenLiteSpeed .htaccess setup guide instead.

Does this work with WooCommerce?

Yes. WP Ghost is fully compatible with WooCommerce on Cloud Panel. Cart, checkout, product pages, and customer accounts all work normally with the configuration described above.

Does WP Ghost modify WordPress core files?

No. WP Ghost writes rewrite rules to hidemywp.conf (a separate config file in your WordPress directory) and uses WordPress hooks. No core files are modified. Deactivating WP Ghost restores all defaults instantly.

Server configuration for WP Ghost:

John Darrel

Change the WordPress Database Prefix for Security

Replace the default wp_ database prefix with a random one to protect against SQL injection…

1 year

Customize WordPress Uploads Directory | WP Ghost

Change the WordPress uploads directory path with WP Ghost (rewrite rules, no files moved) or…

1 year

WP Ghost and WP Rocket Cache Setup Guide

Configure WP Ghost with WP Rocket cache. Enable file optimization, Change Paths in Cache Files.…

1 year

Why is website security important?

https://youtu.be/6ylhojSi-_E In this video, we’ll explore why website security matters and what can happen if…

1 year

Is WordPress Website Easily Hacked?

The security of your WordPress site depends on multiple factors, such as the strength of…

1 year

Set Up WordPress 2FA with Mobile Authenticator Apps

Step-by-step guides to connect WP Ghost 2FA with Google Authenticator, Authy, Microsoft Authenticator, or LastPass.…

1 year